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1 . A method for clustered Secure Sockets Layer (SSL) acceleration 

comprising: 

connecting at least two SSL relays in a cluster; 

transferring infonnation between a first node and one of the at least two SSL 
relays, the transferred information related to communication between the first node 
and a second node; and 

clustering state infonnation of an SSL connection between the first node and 
the one of the at least two SSL relays, the clustering comprising sharing the state 
information between one of the at least two SSL relays and all other SSL relays in 
the cluster, wherein any of the at least two SSL relays can take over all connections 
of another of the at least two SSL relays, therefore providing no inten-uption in the 
communication should any of the at least two SSL relays fail. 

2. The method according to claim 1 , wherein the first node comprises a client 
and the second node comprises a server. 

3. The method according to claim 1 , further comprising transferring the 
information between the first node and a second of the at least two clustered SSL 
relays transparently to the first node upon failure of the one at least two SSL relays. 

4. The method according to claim 1 , further comprising transferring the 
communication from the first node to a second of the at least two clustered SSL 
relays and from the second of the at least two SSL relays to the second node 
transparently to the first node upon failure of the one at least two SSL relays. 
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5. The method according to claim 1, wherein the communication comprises 
data being transferred between the first node and the second node. 

6. The method according to claim 5, further comprising transferring the data 
between the first node and the second node through a second at least two SSL 
relays transparently to the client upon failure of the first at least two SSL relays. 

7. The method according to claim 1 , further comprising sharing an SSL 
session cache across ail of the at least two SSL relays. 

8. The method according to claim 1 , further comprising clustering an SSL 
session resumption between the first node and the one of the at least two SSL 
relays. 

9. The method according to claim 1 , further comprising clustering 
cryptographic keying information across all of the at least two SSL relays. 

10. The method according to claim 9, further comprising clustering a key and 
a current Cipher Block Chaining (CBC) residue. 

1 1 . The method according to claim 9, further comprising clustering a 
sequence number. 

12. The method according to claim 9, further comprising clustering a current 
key schedule. 
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1 13. The method according to claim 9, further comprising clustering a key and 

2 an offset into a key stream. 

1 14. The method according to claim 1 , further comprising clustering a cipher 

2 State. 

1 15. The method according to claim 1, further comprising clustering data from 

2 a partial record corresponding to data from either the first or second node. 

1 .jl 16. The method according to claim 1 , further comprising clustering a record 

2 " size before the record is transmitted. 

1 ; 17. A system for clustered Secure Sockets Layer (SSL) acceleration 

2 r comprising: 

3 a first node; 

4 at least two SSL relays connected in a cluster, the cluster operatively 

5 connected to the first node; and 

6 a second node operatively connected to the at least two clustered SSL relays, 

7 one at least two clustered SSL relays transfemng information between the first node 

8 and the second node, 

9 wherein the state information of an SSL connection between the first node 

10 and the one at least two SSL relays is shared across each of the at least two SSL 

1 1 relays, such that any of the at least two SSL relays is capable of taking over all 

12 connections of another of the at least two SSL relays therefore providing no 

13 interruption in the transfer of information should any of the at least two SSL relays 

14 fail. 
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1 18. The system according to claim 17, wherein the first node is a client and 

2 the second node is a server. 

1 19. An apparatus comprising a storage medium containing instructions stored 

2 therein, the instructions when executed causing a computing device to perform: 

3 connecting the computing device with at least one other computing device In a 

4 p cluster; 

5 3 transfening information between a first node and the computing device, the 

6 V transferred information related to communication between the first node and a 

7 Jj second node; and 

8 PI clustering the state information of a connection between the first node and the 

9 J;j computing device, the clustering comprising sharing the state infomiation with each 

10 ^^j of the at least one other computing device, wherein any of the computing devices 

1 1 III can take over ail connections of another computing device, therefore providing no 

12 interruption in the communication should any of the computing devices fail 

1 20. The apparatus according to claim 19, wherein each computing device 

2 comprises a Secure Sockets Layer (SSL) relay. 

1 21 . The apparatus according to claim 19, wherein the first node is a client 

2 and the second node is a server. 

1 22. An SSL relay, the SSL relay connected in a cluster of SSL relays, 

2 comprising: 

3 a first interface for transferring information between a first node and the SSL 

4 relay; 
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5 a second interface for transferring information between a second node and 

6 the SSL relay; 

7 a third interface for transferring infomiation between SSL relays in the cluster; 

8 and 

9 a storage device, wherein the state information of an SSL connection between 

10 the first node and the SSL relay is shared across each SSL relay in the cluster, any 

1 1 O of the SSL relays in the cluster capable of taking over all connections of another SSL 

12 ji relay In the cluster, therefore providing no interruption in the transfer of information 

13 'j= should any of the SSL relays in the cluster fail. 

1 J=l 23. The apparatus according to claim 22, wherein the first node is a client 

2 jSj and the second node is a server. 

a 

1 24. The apparatus according to claim 22, wherein the first interface and the 

2 second interface are the same. 

1 25. The apparatus according to claim 22, wherein the second interface and 

2 the third interface are the same. 

1 26. The apparatus according to claim 22, wherein the first interface and the 

2 third interface are the same. 

1 27. The apparatus according to claim 22, wherein the first interface and the 

2 second interface and the third interface are the same. 
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